
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: vsZPzGkQYTfPoE1z8Pz0r2m8eB/UcG5dvDQOUtSY2RM=
Subject key identifier: 7A:F1:3E:EA:ED:A3:9E:93:62:A3:80:4F:4F:A3:D9:04:3D:3A:F4:57
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 03A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 0385
Signing time: Thu 23 Jul 2026 01:48:25 +0000
Manifest this update: Thu 23 Jul 2026 01:48:24 +0000
Manifest next update: Thu 30 Jul 2026 01:48:24 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: TuIBOMDb3B/KmxxGQ/3FAzex4Imx/HHMryvodCFnW5I=)
2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: ++TOpbIz4D1k0QpqFIUl2h1hNZQ4CZfs4q8RLlyTsbo=)
3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: lnnL+su9O1+tyTc7UZqdIqQQ4ZWtCaqAPlr6TpKkWjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Jul 23 01:48:24 2026 GMT
Not After : Jul 30 01:48:24 2026 GMT
Subject: CN=6a6172e9-1387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:69:55:c1:c9:4c:a2:a1:c4:31:2d:79:8f:
e9:3c:a9:e3:a2:13:2c:24:5f:67:cb:e1:23:e6:c3:
7e:a6:24:3a:27:44:e4:d2:82:6c:b2:20:32:d3:9c:
4f:c2:3b:32:de:8e:a7:aa:5c:45:59:91:86:c8:36:
82:9b:d3:f7:7c:0f:dd:86:99:02:ae:90:cd:bb:ae:
3d:5d:f7:0f:8a:1f:67:72:2e:2f:1b:db:61:30:8a:
51:ea:c8:64:72:4a:27:94:65:38:70:5b:19:25:00:
dd:5f:dd:6a:5f:c5:53:ef:a2:51:ac:ac:68:6e:42:
95:d6:fe:80:94:1d:c3:9d:f3:59:7d:9c:34:32:cc:
f0:b2:a6:dd:4d:59:5b:d8:f7:d7:7e:cd:58:bb:54:
a8:e6:3d:5f:db:78:3e:7e:88:b3:f8:3a:1c:19:0c:
30:e8:3c:f1:bd:65:58:dd:a4:f2:00:ce:3f:d2:0b:
91:38:b1:6b:2d:a0:2a:4c:5f:8c:bd:f0:41:80:93:
e8:ee:16:d7:e0:89:b4:40:e8:0c:1b:c5:4a:ad:6b:
88:6b:6d:b5:36:39:4a:81:8f:8a:57:8e:6b:0a:52:
c5:e3:23:0e:1f:85:41:ce:e7:13:a7:ba:85:4a:8f:
50:3e:86:3f:1f:8c:86:2c:a5:df:ef:a7:6d:19:50:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:3E:EA:ED:A3:9E:93:62:A3:80:4F:4F:A3:D9:04:3D:3A:F4:57
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:35:11:22:5b:4d:38:46:8f:22:11:58:7d:1d:f0:14:a9:36:
e7:58:3d:ea:fa:4c:41:87:cd:00:a1:2a:65:ea:ef:bd:1e:c8:
af:e1:76:88:1c:e4:26:07:11:e6:20:a5:84:e6:b9:d9:d2:2e:
13:69:f3:5a:21:a7:81:52:b9:1b:92:a6:93:7d:2e:5d:33:1a:
90:bf:54:3a:ca:6a:94:4c:1e:45:43:51:ac:4e:55:b3:27:21:
c1:d4:a9:66:6b:5a:b3:11:be:a1:1a:5e:16:36:f5:8a:fd:62:
81:53:24:e2:6d:0c:eb:14:19:fe:af:4d:ff:ab:81:b8:2c:9b:
72:f8:f4:60:8c:07:f1:31:a5:87:7a:f6:4f:3c:51:da:fa:66:
83:d4:2a:a2:4f:fd:eb:04:f5:fc:fe:16:70:a0:40:c7:72:cb:
77:ea:ac:cc:58:3a:c7:3e:78:a7:15:cf:e1:8b:49:5d:d3:55:
02:7c:70:d5:ed:50:8e:b6:45:a3:b1:fd:5d:2f:85:22:02:03:
d3:21:ec:7a:d7:11:dc:86:96:6e:39:a7:e8:5d:79:66:59:2b:
b3:d6:a9:89:c6:03:af:ce:4f:20:a1:df:ad:6b:3a:b2:f0:e6:
50:81:95:9b:fa:64:56:dc:fa:85:b7:1c:ff:b1:d6:15:e0:2c:
d9:72:4d:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1
QkEwMzkzNTUwHhcNMjYwNzIzMDE0ODI0WhcNMjYwNzMwMDE0ODI0WjAYMRYwFAYD
VQQDEw02YTYxNzJlOS0xMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2ppVcHJTKKhxDEteY/pPKnjohMsJF9ny+Ej5sN+piQ6J0Tk0oJssiAy05xP
wjsy3o6nqlxFWZGGyDaCm9P3fA/dhpkCrpDNu649XfcPih9nci4vG9thMIpR6shk
ckonlGU4cFsZJQDdX91qX8VT76JRrKxobkKV1v6AlB3DnfNZfZw0MszwsqbdTVlb
2PfXfs1Yu1So5j1f23g+foiz+DocGQww6DzxvWVY3aTyAM4/0guROLFrLaAqTF+M
vfBBgJPo7hbX4Im0QOgMG8VKrWuIa221NjlKgY+KV45rClLF4yMOH4VBzucTp7qF
So9QPoY/H4yGLKXf76dtGVBcnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrxPurt
o56TYqOAT0+j2QQ9OvRXMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2
NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEVCMi83QUM3NjdERTA2NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3
Ny0xazIzRGVVY2Rib0RrMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAojURIltNOEaPIhFYfR3wFKk251g96vpMQYfNAKEqZervvR7Ir+F2iBzkJgcR
5iClhOa52dIuE2nzWiGngVK5G5Kmk30uXTMakL9UOspqlEweRUNRrE5VsychwdSp
ZmtasxG+oRpeFjb1iv1igVMk4m0M6xQZ/q9N/6uBuCybcvj0YIwH8TGlh3r2TzxR
2vpmg9Qqok/96wT1/P4WcKBAx3LLd+qszFg6xz54pxXP4YtJXdNVAnxw1e1QjrZF
o7H9XS+FIgID0yHsetcR3IaWbjmn6F15Zlkrs9apicYDr85PIKHfrWs6svDmUIGV
m/pkVtz6hbcc/7HWFeAs2XJN9A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:27 2026 by rpki-client